nixfmt-rfc-style

There is nothing in this commit except for the changes made by
nix-shell -p nixfmt-rfc-style --run "nixfmt ."

If this has mucked up your open branches then sorry about that. You
can probably nixfmt them to match before merging

pkgs/firewallgen/default.nix

@@ -1,79 +1,94 @@
 {
-  nftables
-, writeScript
-, lib
-} :
-name : ruleset :
+  nftables,
+  writeScript,
+  lib,
+}:
+name: ruleset:
 let
-  inherit (lib.strings) concatStringsSep splitString hasInfix substring;
+  inherit (lib.strings)
+    concatStringsSep
+    splitString
+    hasInfix
+    substring
+    ;
   inherit (lib.lists) groupBy;
   inherit (lib.attrsets) mapAttrsToList;
   inherit (builtins) map head tail;
 
-  indentLines = offset : lines :
-    if lines == []
-    then ""
+  indentLines =
+    offset: lines:
+    if lines == [ ] then
+      ""
     else
       let
         line = head lines;
         isOpen = hasInfix "{" line;
         isClose = hasInfix "}" line;
-        offset' = offset +
-                 (if isOpen then 4 else 0) +
-                 (if isClose then -4 else 0);
+        offset' = offset + (if isOpen then 4 else 0) + (if isClose then -4 else 0);
         padding = offset: substring 0 offset "                           ";
       in
-        if (isClose && !isOpen)
-        then
-          (padding offset') + line + "\n" + indentLines offset' (tail lines)
-        else
-          (padding offset) + line + "\n" + indentLines offset' (tail lines);
+      if (isClose && !isOpen) then
+        (padding offset') + line + "\n" + indentLines offset' (tail lines)
+      else
+        (padding offset) + line + "\n" + indentLines offset' (tail lines);
 
-  indent = text : indentLines 0 (splitString "\n" text);
+  indent = text: indentLines 0 (splitString "\n" text);
 
-  dochain = { name, type, family, rules,
-              policy ? null,
-              priority ? "filter",
-              hook ? null } : ''
-    chain ${name} {
-    ${if hook != null
-      then "type ${type} hook ${hook} priority ${priority}; policy ${policy};"
-    else ""
-    }
-    ${concatStringsSep "\n" rules}
-    }
-  '';
+  dochain =
+    {
+      name,
+      type,
+      family,
+      rules,
+      policy ? null,
+      priority ? "filter",
+      hook ? null,
+    }:
+    ''
+      chain ${name} {
+      ${if hook != null then "type ${type} hook ${hook} priority ${priority}; policy ${policy};" else ""}
+      ${concatStringsSep "\n" rules}
+      }
+    '';
 
-  doset = { name, type, elements ? [], ... } : ''
-    set ${name}  {
-      type ${type}
-      ${if elements != []
-        then "elements = { ${concatStringsSep ", " elements } }"
-        else ""
-       }
-    }
-  '';
+  doset =
+    {
+      name,
+      type,
+      elements ? [ ],
+      ...
+    }:
+    ''
+      set ${name}  {
+        type ${type}
+        ${if elements != [ ] then "elements = { ${concatStringsSep ", " elements} }" else ""}
+      }
+    '';
 
   dochainorset =
-    { kind ? "chain", ... } @ params :
+    {
+      kind ? "chain",
+      ...
+    }@params:
     {
       chain = dochain;
       set = doset;
-    }.${kind} params;
+    }
+    .${kind}
+      params;
 
-  dotable = family : chains : ''
+  dotable = family: chains: ''
     table ${family} table-${family} {
     ${concatStringsSep "\n" (map dochainorset chains)}
     }
   '';
-  categorise = chains :
-    groupBy
-      ({ family, ... } : family)
-      (mapAttrsToList (n : v : { name = n; } // v ) chains);
-in writeScript name ''
-#!${nftables}/sbin/nft -f
+  categorise =
+    chains: groupBy ({ family, ... }: family) (mapAttrsToList (n: v: { name = n; } // v) chains);
+in
+writeScript name ''
+  #!${nftables}/sbin/nft -f
 
-flush ruleset
+  flush ruleset
 
-${indent (concatStringsSep "\n" (mapAttrsToList dotable (categorise ruleset)))}
+  ${indent (concatStringsSep "\n" (mapAttrsToList dotable (categorise ruleset)))}
 ''